Skip to content

Security Vulnerability - No path sanitization in _check_git_status() #7

@RamiiDevX

Description

@RamiiDevX

Description

Location

  • File Path - src/py_bugger/cli/cli_utils.py
  • Line Number - 182 - 192

Description of the Issue
git_dir comes from user input via --target-dir. No validation before using in subprocess.

Categorization

  • Type - Security Vulnerability
  • Severity -Critical

Steps to Reproduce

  1. Run py-bugger with --target-dir "../../etc"
  2. Path traversal possible

Proposed Fix
Validate that target_dir is within expected project root before using.

Metadata

Metadata

Assignees

No one assigned

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions